diff --git a/app/main/views/sub_navigation_dictionaries.py b/app/main/views/sub_navigation_dictionaries.py index f043955de..0aba6069b 100644 --- a/app/main/views/sub_navigation_dictionaries.py +++ b/app/main/views/sub_navigation_dictionaries.py @@ -112,9 +112,11 @@ def about_notify_nav(): { "name": "About notify", "link": "main.about_notify", - }, - { - "name": "Security", - "link": "main.about_security", + "sub_navigation_items": [ + { + "name": "Security", + "link": "main.about_security", + }, + ], }, ] diff --git a/app/templates/views/about/security.html b/app/templates/views/about/security.html index b03e593a4..9ebc0420f 100644 --- a/app/templates/views/about/security.html +++ b/app/templates/views/about/security.html @@ -19,15 +19,18 @@

{{page_title}}

  • manage risks around information
  • - Notify.gov operates under a full three-year Authority-to-Operate (ATO). This federal security authorization process leverages security + Notify.gov operates under a full three-year Authority-to-Operate (ATO). This + federal security authorization process leverages security controls provided by National Institute of Standards and Technology (NIST).

    - Our infrastructure runs on cloud.gov and utilizes several + Our infrastructure runs on cloud.gov and utilizes several services through Amazon Web - Services (AWS), including AWS SNS for sending SMS + Services (AWS), including + AWS SNS for sending SMS messages.

    For more information about the Notify.gov infrastructure, contact us at Data retention

    Multi-Factor Authentication

    - Notify.gov uses Login.gov for enhanced security. + Notify.gov uses Login.gov for enhanced security. Login.gov is an extra layer of security created by the government that uses multi-factor authentication and stronger passwords to protect your account.

    To access Notify.gov, users will use a Login.gov account associated with their agency (.gov) email with one of the - multi-factor authentication + multi-factor authentication methods offered through Login.gov.